Appendix A 
Example Command Alias 
In an exemplary system environment 200 as shown in Fig. 2, the following 
Command Alias file is located in the #pragma Namespace ("WW.WrootWops") on a 
management station 202: 



Example: (Win32_NetworkAdapter class command alias) 



instance of Microsof t_CliAlias 
{ 

Connection = 

instance of Microsof t_CliConnection 
{ 

Locale = "ms_409"; 
NameSpace = "R00T\\CIMV2 " ; 
Server = "BAMBAZONKI " ; 
}; 

Descriptions = { 

instance of Microsof t_CliLocalizedString 
{ 

CodePage = 4 01; 

Text = "The Win32_Networ}cAdapter class represents a 
network adapter on a Win32 system."; 

} }; 

Formats = { 

instance of Microsof t_CliFormat 
{ 

Name = "FULL"; 
Properties = { 

instance of Microsof t_CliProperty 

{ 

Derivation = "AdapterType" ; 
Descriptions = { 
instance of 

Microsof t_CliLocali zeds t ring 

{ 

CodePage = 4 01; 

Text = "The AdapterType 
property reflects the network medium in use. This property may not be 
applicable to all types of network adapters listed within this class. 
Windows NT only."; 

}}; 

Name = "AdapterType"; 
}. 

instance of Microsof t_CliProperty 
{ 
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Derivation = "AutoSense"; 
Descriptions = { 
instance of 

Microsoft CliLocalizedString 

5 " { 

CodePage = 4 01; 
Text = "A boolean indicating 
whether the network adapter is capable of automatically determining the 
speed of the attached/network media."; 
10 }); 

Name = "AutoSense"; 
}, 

instance of Microsof t_CliProperty 
{ 

15 Derivation = "Availability"; 

Descriptions = { 
instance of 

Microsof t_CliLocali zeds t ring 

{ 

20 CodePage = 4 01; 

Text = "The availability and 
status of the device. For example, the Availability property indicates 
that the device is running and has full power (value=3) , or is in a 
warning (4), test (5), degraded (10) or power save state (values 13-15 
Q 25 and 17) . Regarding the power saving states, these are defined as 
CI follows: Value 13 (\ "Power Save - Unknown\") indicates that the device 

is known to be in a power save mode, but its exact status in this mode 
is unknown; 14 (\ "Power Save - Low Power Mode\") indicates that the 
device is in a power save state but still functioning, and may exhibit 
ifij 30 degraded performance; 15 (\"Power Save - StandbyX") describes that the 
J~ device is not functioning but could be brought to full power 'quickly'; 

/^l and value 17 (\ "Power Save - Warning\") indicates that the device is in 

'^*' a warning state, though also in a power save mode."; 

} } ; 

O 35 Name = "Availability"; 

m }. 

fj instance of Microsof t_CliProperty 

;F=i Derivation = "Caption"; 

r 40 Descriptions = { 

^ instance of 

Microsof t_Cli Local i zeds t ring 

{ 

CodePage = 401; 

45 Text = "The Caption property 

is a short textual description (one-line string) of the object."; 

}}; 

Name = "Caption"; 

50 instance of Microsoft CliProperty 

{ 

Derivation = "Conf igManagerErrorCode" ; 
Descriptions = { 
instance of 

55 Microsoft CliLocalizedString 

{ 
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CodePage = 4 01; 

Text = "Indicates the Win32 

Configuration Manager error code."; 

}}; 

5 Name = "Conf igManagerErrorCode" ; 

}, 

instance of Microsof t_CliProperty 
{ 

Derivation = "Conf igManagerUserConf ig" ; 
10 Descriptions = { 

instance of 

Microsof t_CliLocali zeds t ring 

{ 

CodePage = 401; 

15 Text = "Indicates whether the 

device is using a user-defined configuration."; 

)}; 

Name = "Conf igManagerUserConf ig" ; 
}, 

20 instance of Microsoft CliProperty 

{ 

Derivation = "CreationClassName" ; 
Name = "CreationClassName"; 

if-' J' 

25 instance of Microsof t_CliProperty 

S { 

y=i Derivation = "Description"; 

Descriptions = { 
ff\ instance of 

Hi 30 Microsoft CliLocalizedString 

O ^ 

CodePage = 4 01; 

"'^ Text = "The Description 

property provides a textual description of the object. "; 



e 35 }}; 

sr?t 



Name = "Description"; 

m }, 

pj] instance of Microsof t_CliProperty 

Q { 

1^, 40 Derivation = "DevicelD"; 

Descriptions = { 
instance of 

Microsof t_CliLocali zeds t ring 

{ 

45 CodePage = 4 01; 

Text = "The DevicelD property 
contains a string uniquely identifying the network adapter from other 
devices on the system."; 

}}; 

50 Name = "DevicelD"; 

}, 

instance of Microsof t_CliProperty 
{ 

Derivation - "ErrorCleared" ; 
55 Descriptions = { 
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instance of 

Microsoft_CliLocalizedString 

{ 

CodePage = 4 01; 

5 Text =^ "ErrorCleared is a 

boolean property indicating that the error reported in LastErrorCode 
property is now cleared."; 

}}; 

Name = "ErrorCleared"; 

10 }, 

instance of Microsoft_CliProperty 
{ 

Derivation = "ErrorDescription" ; 
Descriptions = { 
15 instance of 

Microsof t_CliLocalizedString 

{ 

CodePage = 4 01; 

Text = "ErrorDescription is a 
20 free-form string supplying more information about the error recorded in 
LastErrorCode property, and information on any corrective actions that 
may be taken . " ; 

}}; 

Name = "ErrorDescription"; 

S 25 }, 

'Jj instance of Microsof t_CliProperty 

■fl Derivation "Index"; 

ff{ Descriptions = { 

fy 30 instance of 

H Microsof t_CliLocalizedSt ring 

■CodePage = 401; 
Text = "The Index property 
35 indicates the network adapter's index number, which is stored in the 
system registry. \nExample: 0."; 

W Name = "Index"; 

0 }, 

y= 40 instance of Microsoft CliProperty 

{ 

Derivation = "InstallDate" ; 
Descriptions = { 
instance of 

45 Microsoft CliLocali zeds t ring 

{ 

CodePage = 4 01; 
Text = "The InstallDate 
property is datetime value indicating when the object was installed. A 
50 lack of a value does not indicate that the object is not installed."; 

}}; 

Name = "InstallDate"; 
}. 

instance of Microsof t_CliProperty 
55 { 

Derivation = "Installed"; 



iu 
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Descriptions =^ { 
instance of 

Microsoft_CliLocali zeds t ring 

{ 

5 CodePage = 4 01; 

Text = "The Installed property 
determines whether the network adapter is installed in the 
system. \nValues : TRUE or FALSE. A value of TRUE indicates the network 
adapter is installed."; 
10 }}; 

Name = "Installed"; 
], 

instance of Microsof t_CliProperty 
{ 

15 Derivation = "LastErrorCode" ; 

Descriptions = { 
instance of 

Microsof t_CliLocali zeds t ring 

{ 

20 CodePage = 4 01; 

Text = "LastErrorCode captures 
the last error code reported by the logical device."; 

}}; 

^ Name = "LastErrorCode"; 

y 25 }, 

CI instance of Microsof t_CliProperty 

W { 

t£j Derivation = "MACAddress " ; 

Descriptions = { 
fi\ 30 instance of 

Q Microsof t_CliLocalizedString 

{ 

CodePage = 4 01; 
Text = "The MACAddress 
35 property indicates the media access control address for this network 



yj adapter. A MAC address is a unique 48-bit number assigned to the network 

fy adapter by the manufacturer. It uniquely identifies this network adapter 

and is used for mapping TCP/IP network communications."; 

40 Name = "MACAddress"; 

}, 

instance of Microsof t_CliProperty 
{ 

Derivation = "Manufacturer"; 
45 Descriptions = { 

instance of 

Microsof t_CliLocali zeds t ring 

{ 

CodePage = 401; 

50 Text = "The Manufacturer 

property indicates the name of the network adapter's 
manufacturer . \nExample : 3COM . " ; 

}}; 

Name = "Manufacturer"; 

55 ), 

instance of Microsof t_CliProperty 
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{ 

Derivation = "MaxNumberControlled" ; 
Descriptions = { 

instance of ^ 

5 Microsoft_CliLocali zeds t ring 

{ 

CodePage ^ 4 01; 
Text = "The 

MaxNumberControlled property indicates the maximum number of directly 
10 addressable ports supported by this network adapter. A value of zero 
should be used if the number is unknown."; 

}}; 

Name = "MaxNumberControlled"; 

15 instance of Microsoft CliProperty 

{ 

Derivation = "MaxSpeed"; 
Descriptions = { 
instance of 

20 Microsoft CliLocalizedString 

{ 

CodePage = 401; 

^ Text = "The maximum speed, in 

Q bits per second, for the network adapter."; 

CI 25 } } ; 

j^l Name = "MaxSpeed"; 

€1 ^' 

;F~i instance of Microsoft CliProperty 

jj: 30 Derivation = "Name"; 

[H Descriptions = { 

^■^ instance of 

if Microsoft_CliLocali zeds t ring 

P { 

^\ 35 CodePage = 4 01; 

p_] Text = "The Name property 

defines the label by which the object is known. When subclassed, the 
Name property can be overridden to be a Key property."; 

H; 

40 Name = "Name"; 

instance of Microsof t_CliProperty 
{ 

Derivation = "NetworkAddresses" ; 
45 Descriptions = { 

instance of 

Microsof t__CliLocali zeds t ring 

{ 

CodePage = 4 01; 

50 Text = "An array of strings 

indicating the network addresses for an adapter."; 

}}; 

Name = "NetworkAddresses"; 

55 instance of Microsof t_CliProperty 

{ 



P 
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Derivation = " Permanent Address " ; 
Descriptions = { 
instance of 

Microsof t_CliLocalizedString 

{ 

CodePage = 401; 

Text = "Permanent Address 
defines the network address hard coded into an adapter. This 'hard 
coded* address may be changed via firmware upgrade or software 
configuration. If so, this field should be updated when the change is 
made. PermanentAddress should be left blank if no 'hard coded' address 
exists for the network adapter."; 

}}; 

Name = "PermanentAddress"; 

instance of Microsof t_CliProperty 
{ 

Derivation = "PNPDevicelD" ; 
Descriptions = { 
instance of 

Microsof t_CliLocali zeds t ring 

{ 

CodePage = 401; 
Text = "Indicates the Win32 
Plug and Play device ID of the logical device. Example: *PNP030b"; 

}}/ 

Name = "PNPDevicelD"; 

}r 

instance of Microsof t_CliProperty 
{ 

Derivation = 

"PowerManagementCapabilities" ; 

Descriptions = { 
instance of 

Microsof t_CliLocali zeds t ring 

{ 

CodePage = 4 01; 

Text = "Indicates the specific 
power-related capabilities of the logical device. The array values, 
0=\"Unknown\", l=\"Not- SupportedX" and 2=\"Disabled\" are self- 
explanatory. The value, 3=\"Enabled\" indicates that the power 
management features are currently enabled but the exact feature set is 
unknown or the information is unavailable. \"Power Saving Modes Entered 
AutomaticallyN" (4) describes that a device can change its power state 
based on usage or other criteria. \"Power State SettableX" (5) indicates 
that the SetPowerState method is supported. \"Power Cycling SupportedX" 
(6) indicates that the SetPowerState method can be invoked with the 
PowerState input variable set to 5 (\"Power CycleX") . X"Timed Power On 
SupportedX" (7) indicates that the SetPowerState method can be invoked 
with the PowerState input variable set to 5 (X"Power CycleX") and the 
Time parameter set to a specific date and time, or interval, for power- 
on . " ; 

}}; 

Name = "PowerManagementCapabilities"; 
instance of Microsof t_CliProperty 
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{ 

Derivation = "PowerManagementSupported" ; 
Descriptions = { 
instance of 

5 Microsoft_CliLocali2edString 

{ 

CodePage = 4 01; 

Text = "Indicates that the 
device can be power managed - i.e. can be put into suspend mode, etc. 
10 This boolean does not indicate that power management features are 

currently enabled, only that the logical device is capable of power 
management . " ; 

Name = "PowerManagementSupported"; 

15 }, 

instance of Microsof t_CliProperty 
{ 

Derivation = "ProductName " ; 
Descriptions = { 
20 instance of 

Microsof t_CliLocali zeds t ring 

{ 

CodePage = 401; 

p Text = "The ProductName 

25 property indicates the product name of the network adapter . \nExample : 
Fast EtherLink XL"; 

Name = "ProductName"; 
}/ 

ry 30 instance of Microsoft CliProperty 

\! Derivation = "ServiceName" ; 

-i Descriptions = { 

p instance of 

S 35 Microsoft CliLocalizedString 

in I ^ 

CodePage = 401; 
Text = "The ServiceName 
property indicates the service name of the network adapter. This name is 
40 usually shorter that the full product name. \nExample: Elnkii."; 

}}; 

Name = "ServiceName"; 
}, 

instance of Microsof t_CliProperty 

45 { 

Derivation = "Speed"; 
Descriptions = { 
instance of 

Microsoft CliLocalizedString 

50 " { 

CodePage = 4 01; 
Text = "An estimate of the 
current bandwidth in bits per second. For endpoints which vary in 
bandwidth or for those where no accurate estimation can be made, this 
55 property should contain the nominal bandwidth."; 

}}; 



m 
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Name = "Speed"; 
}, 

instance of Microsof t_CliProperty 
{ 

5 Derivation = "Status"; 

Descriptions = { 
instance of 

Microsof t_CliLocali zeds t ring 

{ 

10 CodePage = 401; 

Text = "The Status property is 
a string indicating the current status of the object. Various 
operational and non-operational statuses can be defined. Operational 
statuses are \"0K\", \"Degraded\" and \"Pred Fail\". \"Pred Fail\" 

15 indicates that an element may be functioning properly but predicting a 
failure in the near future. An example is a SMART-enabled hard drive. 
Non-operational statuses can also be specified. These are \"Error\", 
\"Starting\", \"Stopping\" and \"Service\". The latter, \"Service\", 
could apply during mirror-resilvering of a disk, reload of a user 

20 permissions list," or other administrative work. Not all such work is on- 
line, yet the managed element is neither \"0K\" nor in one of the other 
states . " ; 

}}; 

□ Name = "Status"; 

^ 25 } , 

instance of Microsof t_CliProperty 

Derivation = "Statusinf o" ; 
Descriptions = { 
30 instance of 

U Microsoft CliLocalizedString 

'M " { 

rt CodePage = 401; 

Q Text = "Statuslnfo is a string 

m 35 indicating whether the logical device is in an enabled (value = 3), 

disabled (value =4) or some other (1) or unknown (2) state. If this 
property does not apply to the logical device, the value, 5 (\"Not 
Applicable\" ) , should be used."; 

h- > } ; 

^ 40 Name = "Statuslnfo"; 

instance of Microsof t_CliProperty 
{ 

Derivation = "SystemCreationClassName" ; 
45 Name = "SystemCreationClassName"; 

}, 

instance of Microsof t_CliProperty 
{ 

Derivation = "SystemName" ; 
50 Name = "SystemName"; 

instance of Microsof t_CliProperty 
{ 

Derivation = "TimeOfLastReset "; 
55 Descriptions = { 



s - i 
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instance of 

Microsoft_CliLocali zeds t ring 

{ 

Code Page =4 01; 

5 Text = "The TimeOf LastReset 

property indicates when the network adapter was last reset."; 

}}; 

Name = "TimeOf LastReset" ; 

}}; 

10 }}; 

FriendlyName = "Win32__NetworkAdapter" ; 

Target = "Select * from Win32_NetworkAdapter " ; 

Verbs = { 

instance of Microsoft CliVerb 

15 { " 

Derivation = "SetPowerState" ; 
Descriptions = { 

instance of Microsof t_CliLocalizedString 

{ 

20 CodePage = 401; 

Text = "SetPowerState defines the desired 
power state for a logical device and when a device should be put into 
that state. The desired power state is specified by setting the 
PowerState parameter to one of the following integer values: l=\"Fuil 
*'^' 25 Power\", 2=\" Power Save - Low Power Mode\", 3=\" Power Save - Standby\", 
4=\"Power Save - Other\", 5=\"Power Cycle\" or 6=\"Power Off\". The Time 
parameter (for all state changes, except 5, \"Power Cycle\") indicates 



•=1 



when the power state should be set, either as a regular date-time value 
:p1 or as an interval value (where the interval begins when the method 

pj 30 invocation is received) . When the PowerState parameter is equal to 5, 
Q \"Power Cycle\", the Time parameter indicates when the device should 

power on again. Power off is immediate. SetPowerState should return 0 if 
successful, 1 if the specified PowerState and Time request is not 
supported, and some other value if any other error occurred."; 
35 }}; 

Name = "SetPowerState"; 
Parameters = { 

Ki instance of Microsof t_CliParam 

a { 

|M> 40 Parald = "PowerState"; 



3 



m 



45 



50 



Type = "UINT16"; 
Descriptions; 



instance of Microsof t_CliParam 
{ 

Parald = "Time"; 

Type = "DATETIME"; 
Descriptions; 



55 } } ; 

Usages = { 
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instance of Microsof t_CliLocalizedString 
{ 

CodePage = 401; 

Text = "SetPowerState"; 

}); 

instance of Microsof t_CliVerb 
{ 

Derivation = "Reset"; 
Descriptions = { 

instance of Microsof t_CliLocalizedString 

{ 

CodePage = 401; 

Text = "Requests a reset of the logical 
device. The return value should be 0 if the request was successfully 
executed, 1 if the request is not supported and some other value if an 
error occurred."; 

}}; 

Name = "Reset"; 
Usages = { 

instance of Microsof t_CliLocalizedString 
{ 

CodePage = 401; 
Text = "Reset"; 
}}; 

}}; 

}; 
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Appendix B 



Example XSL File 



In an exemplary system environment 200 as shown in Fig. 2, the following 
XSL files are used to format the display for a list of properties returned through a 
5 command alias: 



Example 1: (WmiCmdTableFormat.xsl) 

<?xml version="1.0" ?> 
10 2 <xsl: stylesheet xmlns:xsl="http://www.w3.org/TR/WD-xsl"> 
- <xsl:template match='7" xml:space="preserve"> 
Name: Value: 
- <xsl:for-each select="CIM//INSTANCE/PROPERTY"> 
<xsl:value-of select="@NAME" /> 




</xsl:for-each> 



<xsl:value-of select="VALUE" /> 



ru 20 



</xsl:template> 
</xsl:stylesheet> 



25 Example 2: (WmiCmdValueFormat.xsl) 




30 

- <xsl:for-each select="CIM//INSTANCE/PROPERTY"> 

<xsl:value-of select="VALUE" /> 



</xsl:for-each> 



35 



</xsl:template> 
</xsl: stylesheet > 



40 
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Appendk C 
Command Line BNF 



<WMICommand> 




WMIC r<global switch list>l <command> 


<global switches list> 




<global switches>|<global switches><global switches list> 


<global switches> 




(/NAMESPACE | /ROLE ) [:<namespace>] | 

/NODE [:<machine id>] | 

/IMPLEVEL [:<ilevel>] | 

/AUTHLEVEL [:<alevel>] | 

/LOCALE [:<locale identifier>] | 

/PRIVILEGES [:<property>] | 

/TRACE [:<option>] | 

/RECORD [:<file path>] | 

/INTERACTIVE 

/USER [:<user id>] | 

/PASSWORD [:<password id>] | 

/? r:<help type>l 


<coinmand > 


::= 


(<alias> [ <WMI object>] | 
[<alias>] <path where>) [<verb clause>] | 
EXIT 1 

CLASS [<class path expression >] [<verb clause>] | 


<path where> 




PATH (<path expression> | <class path expression> )| 
WHbRh <wnere clause> 


<alias> 


■ 


! ! name for the alias. The name will be unique in the 
context of the namespace in which the alias is defined. 
Note CLASS, PATH, WHERE and EXIT cannot be used 
as alias names as they appear in the same location in the 
syntax. 


<WMI obiect> 




<alias parameters> 


<path expression> 




! ! A WMI path expression including a key clause 


<where clause> 


::- 


! ! A WQL where clause 


<class path expression > 




! ! A WMI path expression that does not include key clause 


<aHas parameters> 




! ! one or more space delimited literals that will be used as 
substitutions in the alias's PWhere value. Note this and the 
three previous productions terminate with either a 
character indicating a switch or verb or with the end of line 
marking the termination of the conunand 


<verb clause> 




(<verb> [<verb parameters>] | 
<standard verb>) r<verb switches>1 


<verb> 




<property name> | 
<identifier> | 
<method name> 


<verb switches> 




/INTERACTIVE | 
/NOINTERACTIVE | 
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<verb parameter> 




<actual parameter> | 
<actual parameter> , <verb parameter> 


<standard verb> 




<get verb> | 
<hst verb> | 
<assoc verb> | 
<call verD> | 
*^sei vero-^ 


<'iaentuier> 






^luneau-^ [^luresi^j 


<iaiieaa> 






<ietter> 


<idrest> 






<icientiiier> [<^ietier> | <ciigit>| 


<get verb> 






Uli 1 [^property iist>j L^get switcnes>j 


<property list> 






<property name> | 

<property nanie> , <property list> 


— r u 

<list verb> 






Lio 1 [^usi lormat^i^-iisi swiicnes-^j 


<assoc verb> 






ASSOC r<format specifier>] 


^ Anil ^ • A -mlXm. 

<call verb> 






CALL <niethod name> r<actual parameter list>] 


<actual parameter list> 






<actual parameter> | 

<actual parameter , <actual parameter list> 


<set verb> 




SET <assign list> 


<assign list> 




<property name> = <property value> | 

<property name> = <property value> <assign list> 








<get switches> 




A/^ALUE 1 
/ALL| 

/TRANSLATE | 
/EVERY :<mterval> | 
/FORMAT [:<format specifier>] | 
/DbbCKlr 1 ION [:<coae page>| 


<interval> 




! ! numeric value indicating frequency within which values 
should be retumed 


<formatspecifier> 




:<xsl file name> | 
:TABLE | 
:MOF 


<list format> 




BRIEF 1 
INSTANCE 1 
SYSTEM 1 
STATUS 1 
FULLI 
<user fonnat> 


<list switches> 




/TRANSLATE | 
/EVERY :<interval> 
/FORMAT r:<format specifier>l 


<help type> 




: BRIEF 1 
:FULL 
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10 



•J 



AppendkD 
Examples of Command Line Processing 

General 

A.1 Global Switches (Qualifiers) Usage: 

Global switches (to the right of the "$ wmic") denote operations that operate at the full 
context of the connnnand. Therefore, these switchers apply to an entire session 
established by the command. 

$wmic 17 

Display command global switches and all registered aliases. 

$ wmic /locale 40b 

specify Finnish for localization (impersonation) 



$wmic INODE 

1 5 Which node to connect to for getting info 



CI $ wmic /NODE 17 //Discover mgmt arenas <based on namespaces> 

K defaults to \\root\ cli> 

fi 

y i 20 Network - manage the network subsystem namespace 

^ll Apps - manage applications namespace 

Q System - manage operating system namespace 

SI Devices- manage devices namespace 

Users - manage users namespace 

S 25 DB - manage DBAs namespace 

m 

m 

W $ wmic /NODE \\root\cimv2 //Escape to preferred namespace 

O 

^' 30 $wmic /NODE WremoteServerA \\root\cimv2\applications 

set operations against aliases on the specified namespace of remoteServerA 
\\root\clm v2\applications 



35 $ wmic /NODE system 17 //Discover any available sub scopes 

Processor - manage the network subsystem <alias> 

Bios - manage BIOS functions 

Disks - manage storage 

40 LogDrives - manage logical drive partitions 

Process - manage operating processes 

Service - manage system services 

DCOM - manage DOOM Configuration 

Scheduling -manage jobs 
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15 



$ wmic /trace 

output all debugging info to {stderr} 



A.2 Command Line Alias 



An example of a printer alias is as follows: 



$ wmic printer 

1 0 # Where 'printer* is defined as an alias for WIN32_PRINTER is 

equivalent to the following class escape: 



$ wmic CLASS WIN32 PRINTER 



A.3 Verb Usage 



Standard Verb Operations 



m 

m 20 

m 
m 
m 

25 



$ wmic {alias} {verb} /? 

[Display description, switches, and parameters] 

[Display description, verb, and Keyword info for the specified alias. Verbs 
available to aliases {Only supported standard verbs for an alias will be shown) include: 

GET Data get operations 

SET Data set operations 

CALL Method, execution operations 

LIST Show data (like netsh, etc.) 

ASSOC Associate operation/data according to specified fomiat. 



30 



35 



GET Operations 

$ wmic {alias} GET/? 

Display get switches and all properties for the specified object and its 
descriptions. If the object was an ALIAS - only the properties that are defined 
for that alias are displayed (whether view object, scopes, containers, etc.). 
These properties map to properties on the referred to WMIOBJECT but can have 

different (user friendly) names. If the object was a WMI CLASS NAME 
(eg. wmic CLASS WIN32_PRINTER GET 17) then the properties come from the 
class itself. 



40 



GET SWITCHES include: 
A/ALUE (default) 
/DESCRIPTION 
/ALL 

rrRANSLATE 
/EVERY 



Return value (mapped if required) 
Return description 

Return the data and metadata for attribute 
Translate return value via UNIX TR semantics. 
Useful for exporting to CSVs 
Return values every ( X inten/al) seconds 
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/FORMAT Keyword OR XSL filename to process XML 

Results. 



5 Example of a user-friendly command: 

$ wmic system\process GET /FORMAT :TABLE * EXECUTABLEPATH 

401 E:\\Program FilesWIntemet ExplorerWIEXPLORE.EXE 

402 E:\WINNT\system32\psxss.exe 
10 1232 E:\WINNT\system32\msiexec.exe 



A user-friendly command: 

$ wmic system\process GET /DESCRIPTION : 401 ExecutablePath 

1 5 PageFaults 



PageFileUsage PageFileilsage 

HANDLE 401 A string used to identify the process, A process 
ID is a process handle. 

20 ExecutablePath E:\\Program FilesWInternet ExplorerWIEXPLORE.EXE 

O The ExecutablePath property indicates the path 

^tS to the executable file of the process 

ffl PageFaults 3062 The PageFaults property indicates the number 

of page faults generated by the process. 



m 25 

in 



Ifli 



Mi 



35 



The user-friendly command: 



$ wmic system\process WHERE (Caption = "SPOOLSV.EXE") GET Threads , Faults 
30 /FORIWAT : TABLE /EVERY :15 



532 


10 


3062 


532 


12 


3093 


532 


11 


3102 



# A new line is printed every 15 seconds 



Is equivalent to the following: 



40 $ wmic CLASS WIN32_PROCESS WHERE (Caption = "SPOOLSV.EXE") GET 

ThreadCount, PageFaults /FORMAT :TABLE /EVERY: 15 





532 


10 


3062 




532 


12 


3093 


45 


532 


11 


3102 



# Note that different property names from the previous example. 
The previous example had # user-friendly names but this refers to 
the WMI class so it uses its property names. 
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SET Operations 

The interactive command syntax: 

$ wmic users\accounts WHERE(domain^edmond AND disabled=hJse AND locked=true) SET 
disabled=true /INTERACTIVE 

disable account Redmond\Travism[y/n]y 
10 account disabled 

disable account Redmond\UserJoe[y/n]n 

account skipped 
disable account Redmond\j-mierty/n]y 

account disabled 

15 LIST Operations 

$ wmic {alias} LIST/? 

[Display swithes and options. Switches include: 

/FULL Return the full set of properties 

20 /BRIEF Return a BRIEF set of the properties 

/INSTANCE Return just the instance names 

/TRANSLATE Translate return value via UNIX TR semantics. 
Useful for exporting to CSVs 

/EVERY Return values every X (specified interval) seconds 

25 /SYSTEM Show system properties 

/FORMAT Specify an XSL to fomiat data 

/STATUS Show the status of the object 

/CONFIG Return the configuration of the component 

/<user format> Show what the user format is. 



30 



35 



The user-friendly command svntax: 
$ wmic systemVprocess LIST 
HANDLE NAME PATH 



401 IEXPLORE.EXE E:\\Program FilesWInternet ExplorerWI EXPLORE.EXE 

402 psxss.exe E:\WINNT\system32\psxss.exe 
40 1232 msiexec.exe E:\WINNT\system32\msiexec.exe 

1 103 svchost.exe E:\WINNT\System32\svchost.exe 

The user-friendiv command svntax. using BRIEF qualifier: 

45 $ wmic system\process 1103 LIST brief 

Handle 1103 
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Name svchostexe 

Executation Path E:\WI N NT\System32\svchost.exe 
PageFaults 3062 
PageFileUsage 3481600 



The user-friendly command syntax, using FULL switch: 

$ wmic systemVprocess 401 list full 

Caption = "notepad.exe"; 
CreationClassName = "Win32_Process"; 
CreationDate = "20000414150141.596597-420"; 
CSCreationClassName = "Win32_ComputerSystem"; 
CSName = "JSNOVER004"; 
Description = "notepad.exe"; 

ExecutablePath = "E:\\WINNT\\System32\\notepad.exe"; 
Handle = "1172"; 
HandleCount = 21; 
KernelModeTime = "36852992"; 
MaximumWorkingSetSize = 1413120; 
MinimumWorkingSetSize = 204800; 
Name = "notepad.exe"; 

OSCreationClassName = "Win32_OperatingSystem"; 
OSName = "Microsoft Windows 2000 Professional 
|E:\\WINNT|\\Device\\Harddisk0\\Partition2"; 

OtherOperationCount = "9"; 
OtherTransferCount = "0"; 
PageFaults = 299; 
PageFileUsage = 282624; 
ParentProcessId = 288; 
PeakPageFileUsage = 290816; 
PeakVirtualSize = "14680064"; 
PeakWorkingSetSize = 1105920; 
Priority = 8; 

PrivatePageCount = "282624"; 
Processid = 401; 

QuotaNonPagedPoolUsage = 1876; 
QuotaPagedPoolUsage = 17284; 
QuotaPeakNonPagedPoolUsage = 1928; 
QuotaPeakPagedPoolUsage = 17988; 
ReadOperationCount = "0"; 
ReadTransferCount = "0"; 
Sessionid = 0; 
ThreadCount = 1; 
UserModeTime = "4907056"; 
VirtualSize = "14667776"; 
WindowsVerslon = "5.0.2195"; 
WorkingSetSize = "1101824"; 
WriteOperationCount = "0"; 
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WriteTransferCount = "0"; 



$ wmic system\process where (name = svchostexe) list full 
Handle 1103 
Name svchost.exe 

Executation Path E:\WI N NT\Systenn32\svchost. exe 
PageFaults 3062 
PageFileUsage 3481600 



Advanced Scenarios Available to the User 

/ want to be able to list printers on a server, view status like out of paper. . . 

$ wmic /NODE:servername devices\printer LIST DetectedErrorState 

Name Port DetectedErrorState 



HP LaserJet 4Si LPT1 : No Error 

\\ntprint\By DaveTh 40_hall2 npide99b9 No Paper 

\\corp1\ntprinter2 44_4 aod444 Low Toner 

+++++++++++++++++++++++++++++++++++++++++++++++++ 
/ want to be able to pause or delete jobs, change properties... 



$ wmic printjob Where(Name=\\corp1\ntprinter2 and Size > 1000000) kill /interactive 

146 Microsoft Word - DVD-RAM.doc [y/n]y 

deleted 

147 Microsoft Word - Life of Brian.doc[y/n]n 

148 Microsoft Word - Whistler Plan[y/n]Y 

deleted 



/ also want to restrict certain printer description to 48 chars for DOS clients even 
though schema allows 256. 

$ wmic CLASS WIN32_printer WHERE (Name=HP LaserJet 4Si) SET DESCRIPTION 
"this is a test of the length of a description" 

$ wmic printer WHERE (Name=HP LaserJet 4Si) SET DESC "this is a test of the 
length of a description" 

ERROR: Text ("this is a test of the length of a description") too long 

#Note that the first one succeed and it's name was "Description" the 
second one failed and it's name was DESC. This is because the Alias 
specified as PROPERTY DESC that mapped to DESCRIPTION but had 
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additional semantic/restrictions. In this case it had a short MAX LENGTH 



need help occasionally because i can't always remember the syntax., . 



$ wmic /ROLE/? 



Network 

Apps 

System 

Devices 

Users 

DB 



$ wmic system /? 



Processor 
Bios 
Disks 
LogDrives 

Process 

Service 
DCOM 
Scheduling 



$ wmic system\printer /? 



PRINTER 

GET 
SET 
CYCLE 

SETPOWERSTATE 



Get parameters 
Set Parameters 
Cycle Power 
Set power state 



$ wmic systemVprinter GET /? 



Property 


Type 


Operation 


Availability 


INT16 


Read-Only 


AveragePagesPerMinute 


INT32 


Read-Only 


Caption 


String 


Read\Write 


DriverName 


String 


Read-Only 


PortName 


String 


Read-Only 



$ wmic systemVprinter SET /? 
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10 



15 



20 



25 



30 



35 



40 



45 



Property 
Caption 



Type 
String 



$ wmic systemVprinter CALL /? 

Call 



reset 

setpowerstate 



Input Param(s)&Type Status 

Implemented 

powerstate(int16) 

time{date/time) Implemented 



Verifies in \NMi schema qualifier if the method is implemented. 



$ wnfiic system\printer CALL /? : brief 

Call Input Param(s)&Type Status 

Implemented 
Implemented 



reset 

setpowerstate 



powerstate(int16) 
time(date/time) 



$ wmic systemVprinter GET /? : brief 



Property 


Type 


Operation 


Availability 


INT16 


Read-Only 


AveragePagesPerMinute 


INT32 


Read-Only 


Caption 


String 


ReadWVrite 


DriverName 


String 


Read-Only 


PortName 


String 


Read-Only 



$ wmic systemVprinter GET \\corD00\ntorint1 Availability / 7 : full 

PnDperty Type Operation 

Availability INT16 Read-Only 

Description: 

The availability and status of the device. For example, 

the Availability property indicates that the device is 

running and has full power {value=3), or is in a waming (4), 

test (5), degraded (10) or power save state (values 13-15 and 17). 

Regarding the power saving states, these are defined as follows: 

Value 13 ("Power Save - Unknown") indicates that the device is 
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known to be in a power save mode, but its exact status in this mode 
is unknown; 14 ("Power Save - Low Power Mode") indicates that the 
device is in a power save state but still functioning, and may 
exhibit degraded perfomnance; 15 ("Power Save - Standby") 
describes that the device is not functioning but could be brought 
to full power 'quickl/; and value 17 ("Power Save - Waming") 
indicates that the device is in a waming state, though also in 
a power save mode. 



$ wmic system/printer CALL 17 : full 

Call Input ParBm(s)&Type Status 



reset Implemented 
Description: 

Requests a reset of the logical device. The retum value 
should be 0 if the request was successfully executed, 1 if 
the request is not supported and some other value if an 
en"or occurred. 

Call Input Param(s)&Type Status 



setpowerstate powerstate(int1 6) 

time(dateAime) Implemented 

Description: 

SetPowerState defines the desired power state for a logical device 
and when a device should be put into that state. The desired power 
state is specified by setting the PowerState parameter to one of 
the following integer values: 1="Full Power", 2- 'Power Save - Low 
Power Mode", 3="Power Save - Standby", 4="Power Save - Other", 
5="Power Cycle" or 6="Power Off'. The Time parameter (for all 
state changes, except 5. "Power Cycle") indicates when the power 
state should be set, either as a regular date-time value or as 
an interval value (where the interval begins when the method 
invocation is received). When the PowerState parameter is equal 
to 5, "Power Cycle", the Time parameter indicates when the device 
should power on again. Power off is immediate. SetPowerState 
should return 0 if successful, 1 if the specified PowerState 
and Time request is not supported, and some other value if any 
other enror occurred. 
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